CWE-829.

PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

• PostgreSQL
• CWE-829

Cursor Agent is vulnerable to prompt injection via MCP Special Files

• cursor
• Command injection
• CWE-829

SimpleHelp Inclusion of functionality from untrusted control sphere

• Simplehelp
• CWE-829

OpenAI Codex CLI: OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the…

• OpenAI Codex CLI
• CWE-829

One Identity Password Manager: The Secure Password extension in One Identity Password Manager before 5.14.4 allows local…

• One Identity Password Manager
• CWE-829

Folo allows secrets exfiltration via `pull_request_target`

• RSSNext Folo
• CWE-829

mtr: mtr through 0.95, in certain privileged contexts…

• mtr
• CWE-829

Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write

• Lucee
• Code injection
• CWE-829

Monero Forum Remote Code Execution via Arbitrary File Read and Cookie Forgery

• Monero Project Forum
• Insecure deserialization
• CWE-20

Sudo: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf…

• Sudo
• CWE-829

@nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests

• CWE-829

<=4.0.0 · no fixed version yet

Elastic Agent Inclusion of Functionality from Untrusted Control Sphere

• Elastic Agent
• CWE-829

Cisco Webex App Client-Side Remote Code Execution Vulnerability

• Cisco Webex Teams
• CWE-829

Privilege escalation in B&R APROL

• B&R Industrial Automation B&R APROL
• CWE-829

Kedro allows Remote Code Execution by Pulling Micro Packages

• Code injection
• CWE-20

<=0.19.8 · no fixed version yet

Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

• nhairs python-json-logger
• CWE-829

Remote Code Execution within Collabora Online jail with Macros Enabled

• online
• CWE-829

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012.

• CWE-829

RCE in the package conda-forge-metadata

• conda-forge-metadata
• CWE-829

Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)

• Google Cloud Application Integration
• CWE-829

An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.

• CWE-829

The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privile…

• CWE-829

Windows Hyper-V Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-20
• CWE-829

Synology Drive Client: Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL…

• Synology Drive Client
• CWE-829

The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function.

• CWE-829

Gallagher Command Centre Server: Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre…

• Gallagher Command Centre Server
• CWE-829

Anki Latex Incomplete Blocklist Vulnerability

• CWE-829

<24.6 · fixed in 24.6

Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

• CWE-829

<2.39.1 · fixed in 2.39.1

Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

• Apache Software Foundation Apache HTTP Server
• CWE-829

Zigbee co-ordinator realignment packet may lead to denial of service

• silabs.com Ember ZNet SDK
• CWE-829

Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-829

Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point…: A command execution vulnerability exists in the tddpd enable_test_mode functionality of…

• Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
• Tp-Link N300 Wireless Access Point (EAP115)
• CWE-829

Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point…: A command execution vulnerability exists in the tddpd enable_test_mode functionality of…

• Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
• Tp-Link N300 Wireless Access Point (EAP115)
• CWE-829

WeasyPrint allows the attachment of arbitrary files and URLs to a PDF

• CWE-829

>=61.0, <61.2 · fixed in 61.2

Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php

• CWE-829

>=2.0.0-alpha1, <2.2.23 || >=2.3.0-rc1, <2.7.0 · fixed in 2.2.23, 2.7.0

Breaking unlinkability in Identity Mixer using malicious keys

• CWE-829

* · no fixed version yet

Ray has arbitrary code execution via jobs submission API

• Server-side request forgery (SSRF)
• CWE-829

<=2.49.2 · no fixed version yet

Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack

• WPN-XM Serverstack
• CWE-829

Yettiesoft VestCert Remote Code Execution Vulnerability

• Yettiesoft VestCert
• CWE-829

M-Files Web Companion allows Remote Code Execution

• M-Files Web Companion
• CWE-829

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog

• Docker Inc. Docker Desktop
• Cross-site scripting (XSS)
• Code injection

Apache HDFS Provider error message suggested

• CWE-829

<4.1.1 · fixed in 4.1.1

Local file Inclusion (LFI) in Forum Infusion via Directory Traversal

• PHPFusion
• CWE-829

Inclusion of Functionality from Untrusted Control Sphere

• Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software
• CWE-829

Inclusion of Functionality from Untrusted Control Sphere

• Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software
• CWE-829

Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.

• Insecure deserialization
• CWE-829

<4.1.3 · fixed in 4.1.3

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts.

• Ovarro TBox MS-CPU32
• Ovarro TBox MS-CPU32-S2
• CWE-829

Remote Code Execution with Root Privileges via Broad Apache Permissions

• Tribe29 Checkmk
• CWE-829

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

• CWE-829

<=25.1.0 · no fixed version yet

Gradle usage of long IDs for PGP keys opens potential for collision attacks

• gradle
• CWE-829

Cloudflow - Local File Inclusion Vulnerability

• Hybrid Software Cloudflow
• CWE-829

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell.

• CWE-829

Mozilla Firefox: An iframe that was not permitted to run scripts could do so if the user clicked on a…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-829

Markdownify subject to Remote Code Execution via malicious markdown file

• CWE-829

<=1.4.1 · no fixed version yet

Junos OS: PHP file inclusion vulnerability in J-Web

• Juniper Networks Junos OS
• CWE-829

Mitsubishi Electric GENESIS64: Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi…

• Mitsubishi Electric GENESIS64
• Mitsubishi Electric Iconics Digital Solutions GENESIS64
• CWE-829

Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed

• gradle
• CWE-829

In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoints during installation.

• The Eclipse Foundation Eclipse Equinox p2
• CWE-829

Duplicate Advisory: Embedded malware in ua-parser-js

• CWE-829
• CWE-912

>=0.7.29, <0.7.30 || >=0.8.0, <0.8.1 || >=1.0.0, <1.0.1 · fixed in 0.7.30, 0.8.1, 1.0.1

Magento remote code execution vulnerability

• CWE-829

>=2.2.0, <2.2.10 || >=2.3.0, <2.3.2-p2 · fixed in 2.2.10, 2.3.2-p2